queueWithdrawals是如何避免恶意/无权限者提交申请的 上课没理解太明白，复习看代码也没搞懂 没看出如何进行保护的，甚至连staker和operator是否对应都没检查 还是说因为后续需要链下审核所以不需要保护？ 但如果是宽进严出、随便提，那是不是不该这这里直接_decreaseOperatorShares和strategyManager.removeShares
function queueWithdrawals(
QueuedWithdrawalParams[] calldata queuedWithdrawalParams
) external returns (bytes32[] memory) { }
function _removeSharesAndQueueWithdrawal(
address staker,
address operator,
address withdrawer,
IStrategyBase[] memory strategies,
uint256[] memory shares
) internal returns (bytes32) { }